No CVE Today, Please
metalnix
26 points
17 comments
November 06, 2026
Related Discussions
Found 5 related stories in 125.8ms across 11,878 title embeddings via pgvector HNSW
- A CVE Dispute theanonymousone · 186 pts · August 31, 2026 · 60% similar
- CVE Tracker Group_B · 143 pts · October 23, 2026 · 55% similar
- Over 400 Linux CVEs published in the last 24 hours alone aghuang · 72 pts · July 21, 2026 · 54% similar
- Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming petecooper · 145 pts · October 20, 2026 · 51% similar
- Only 0.5% of 383,000 CVEs are ever exploited in real-world attacks wondersky · 15 pts · November 03, 2026 · 50% similar
Discussion Highlights (11 comments)
tomtomtom777
I hear you. This pretty daunting: https://cve.0xosprey.com/
lousken
It's ok, the more companies have airgap systems the better.
phyzome
Valid, but... 1. I would like this better if it were not in LLM-speak. 2. You do not owe your employer more than your 40 hours per week (average). If you're overworked, that's a decision on your employer's part. Do what you can, advocate for appropriate investment in compensating controls, burn-down of tech debt, prioritize the issues... but don't hurt yourself.
darthoctopus
I feel that LLM-assisted writing really undercuts the point of what is ostensibly a cri du coeur...
its-summertime
> This page ships no JavaScript Would be more convincing if the page didn't have JavaScript.
tamimio
The CVE will continue until the morale improves
fathermarz
I believe at the current rate, it should be considered to look to different ways to audit your software instead of CVEs. It was already unmanageable before AI, now it is impossible to triage.
LordDragonfang
> I patched on Monday. Tuesday was Patch Tuesday. Wednesday was Exploit Wednesday, because somebody read Tuesday’s diff. Claude wrote this. And you can tell nobody actually read carefully, because it couldn't even get three items into a list without saying something incongruous (if somebody "read Tuesday's diff", that's Tuesday's CVE, not a new one on Wednesday, the thing being complained about). https://www.pangram.com/history/3b7a78c1-a76e-4a93-8eef-7aee... There's some irony in releasing a wholly AI-generated page with a lack of attention to detail to complain about the AI-induced security catastrophe stemming from a lack of attention to detail.
rvz
Yes. There will be at least ONE critical CVE every week.
impure
This message brought to you by the NSA. Please do not patch your systems.
viraptor
As much as I'm for releasing everything people learned and patching all-the-things soon, I would really like it if nobody was an asshole around Christmas. You can wait until next year - just let people rest - there's no point doing disclosures then from the non-malicious side.